{"id":"CVE-2026-83778","published":"2026-10-13T19:20:26.563","lastModified":"2026-10-16T16:21:30.897","description":"Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83778","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft's Internet Messaging API allows remote attackers to execute arbitrary code on affected systems. This vulnerability is particularly concerning because it can be exploited over the network without requiring user interaction, making it highly suitable for automated attacks.","exploitability":"Exploitation is moderately difficult and requires a network-based attack vector with specific memory layout conditions, but does not require user interaction once the vulnerable API is accessed.","blast_radius":"The vulnerability could affect a wide range of Microsoft products that use the Internet Messaging API, potentially allowing attackers to gain full system compromise across multiple platforms including Windows desktops, servers, and cloud services.","remediation":"Apply the latest available security update from Microsoft that addresses CVE-2026-83778, specifically the patch released in the July 2026 Security Updates for Windows and Office products.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","network","microsoft","buffer-overflow"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:59:06.875Z"}}